-
All things infostealers. Week 35, 2025
A brief look at all things infostealers for the week 35, 2025 (25.08.2025–31.08.2025). An update from AURA Stealer. Grabbed some numbers from marketplaces and some interesting news/articles. Note: All the screenshots are taken from the XSS forum, unless otherwise stated. Note: The update posts are copy-pasted as is (and machine-translated with DeepL.com if post wasn’t available in…
-
All things infostealers. Week 34, 2025
A brief look at all things infostealers for the week 34, 2025 (18.08.2025–24.08.2025). Grabbed some numbers from marketplaces and some interesting news/articles. Infostealer Updates ¯\_(ツ)_/¯ Marketplace Updates This section provides some numbers taken from the marketplaces, which include numbers of victims based on stealers, top 5 countries, the victim numbers in the countries of the…
-
All things infostealers. Week 33, 2025
A brief look at all things infostealers for the week 33, 2025 (11.08.2025–17.08.2025). Got access to the “restored” XSS forum and checked if there were any updates in infostealers that are new/missed by me. Grabbed some numbers from marketplaces and some interesting news/articles. Note: All the screenshots are taken from the XSS forum, unless otherwise stated.…
-
All things infostealers. Week 32, 2025
A brief look at all things infostealers for the week 32, 2025 (04.08.2025–10.08.2025). Grabbed some numbers from marketplaces and some interesting news/articles. Infostealer Updates ¯\_(ツ)_/¯ Marketplace Updates This section provides some numbers taken from the marketplaces, which include numbers of victims based on stealers, top 5 countries, the victim numbers in the countries of the…
-
Scania Insurance Files Leaked
In June 2025, Scania, a Swedish manufacturer of heavy trucks, industrial and marine engines, confirmed that they have been a subject of an cyberattack. According to the company their systems were breached on 28th May 2025, where a threat actor used leaked credentials from an infostealer infection to gain the foothold. The company has confirmed…
-
All things infostealers. Week 31, 2025
A brief look at all things infostealers for the week 31, 2025 (28.07.2025–03.08.2025). I was traveling and had an unexpected vacation at work, did not have time to search and update information on the infostealers. Grabbed some numbers from marketplaces and some interesting news/articles. Infostealer Updates ¯\_(ツ)_/¯ Marketplace Updates This section provides some numbers taken…
-
All things infostealers. Week 30, 2025
A brief look at all things infostealers for the week 30, 2025 (21.07.2025–27.07.2025). I had some issues with accessing to the XSS forum due to well-known developments, therefore, no Infostealer updates. Grabbed some numbers from marketplaces and some interesting news/articles. Infostealer Updates ¯\_(ツ)_/¯ Marketplace Updates This section provides some numbers taken from the marketplaces, which…
-
All things infostealers. Week 29, 2025
A brief look at all things infostealers for the week 29, 2025 (14.07.2025–20.07.2025). This week observed updates in MonsterV2, Bee Stealer and AURA Stealer. Grabbed some numbers from marketplaces and some interesting news/articles. A bit of an update on “Marketplace Updates”. Last year on BalcCon I met a cool guy from South America and since…
-
All things infostealers. Week 28, 2025
A brief look at all things infostealers for the week 28, 2025 (07.07.2025–13.07.2025). This week observed updates in MonsterV2 and an emergence of a new stealer. Grabbed some numbers from marketplaces and some interesting news/articles. Infostealer Updates MonsterV2 [+] Added the ability to launch the stealer on all bots[+] Added the ability to launch the…
-
AURA Stealer
A new infostealer MaaS, named AURAStealer, was advertised on the XSS forum. Below is the machine translation of forum post. The machine translation is done by using DeepL.com. All the screenshots are taken from the XSS forum. I have skipped few screenshots of the MaaS’s panel due to them being nearly the same as other…